Black & White Path

May 14, 2026 · Industry Insights

Pwn2Own Crushed by a 0‑Day Flood: Uncovering a Structural Security Crisis

At Pwn2Own Berlin 2026, Trend Micro’s ZDI rejected over 100 zero‑day submissions, prompting researchers to disclose vulnerabilities publicly, which forced Mozilla to issue emergency patches and exposed a systemic mismatch between AI‑driven vulnerability production and the competition’s industrial‑era review capacity, challenging existing CVD policies.